Open mmcgrana opened 10 years ago
:+1: to Threat Modeling (#39); it's the best single book on this topic I've read so far. The other work you might want to consider is The Tangled Web, though that one is (as the name implies) very Web-specific, and more generally applicable.
General paper- or book-length resources on security engineering practices.